Vulnerability in Duplicator
CVE-2023-6114
The Duplicator WordPress plugin before 1.5.7.1, Duplicator Pro WordPress plugin before 4.5.14.2 does not disallow listing the `backups-dup-lite/tmp` directory (or the `backups-dup-pro/tmp` directory in the Pro version), which temporarily s…
EPSS: 0.613 (98.3th percentile) — read the EPSS interpretation.
Affected products
- Unknown Duplicator — versions 0
- Unknown Duplicator Pro — versions 0
Public proof-of-concept exploits
References
- wpscan.com/vulnerability/5c5d41b9-1463-4a9b-862f-e9ee600ef8e1 (exploit, vdb-entry, technical-description)
- drive.google.com/file/d/1mpapFCqfZLv__EAM7uivrrl2h55rpi1V/view
Frequently asked questions
- What is CVE-2023-6114?
- CVE-2023-6114 is a vulnerability in Duplicator, classified under CWE-200 INFORMATION EXPOSURE. Published 2023-12-26.
- Is CVE-2023-6114 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.